Terms and Conditions

FullHunt provides an enterprise-grade External Attack Surface Management (EASM) platform, continuous monitoring services, and application programming interfaces (collectively, the "Services"). By accessing our website at https://fullhunt.io, creating an account, or using any of the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms in full.

If you do not agree to these Terms, or any part of them, you must immediately cease using the Services and, if applicable, delete your account. Where the Services are procured on behalf of an organization, you represent that you are authorized to bind that organization to these Terms.

• "Services" means the FullHunt EASM platform, APIs, dashboards, and any related products, features, tools, or deliverables made available by FullHunt.
• "Client Data" means all data, content, configurations, and information you submit to or input into the Services, including asset inventories, scopes, and monitoring parameters.
• "FullHunt Content" means all data, intelligence, reports, and outputs generated, compiled, or delivered by the Services.
• "Order Form" means any written or electronic ordering document, subscription plan, or statement of work agreed between you and FullHunt that references these Terms.
• "Confidential Information" means any non-public information disclosed by one party to the other, whether in writing, electronically, or orally, that is designated as confidential or that a reasonable person would understand to be confidential.

FullHunt provides cybersecurity intelligence and infrastructure, including but not limited to:

• External Attack Surface Management (EASM): Continuous, internet-scale discovery and monitoring of external-facing assets, including subdomains, IPs, cloud services, and other exposed infrastructure.
• Vulnerability and Threat Intelligence: Detection of network exposures, misconfigurations, and vulnerabilities, contextualized against threat intelligence sources including EPSS and CISA Known Exploited Vulnerabilities (KEV) data.
• API and OEM Solutions: Programmatic access to asset discovery, vulnerability intelligence, and attack path analysis data for security vendors, partners, and automated workflows.

The specific scope, features, and service levels applicable to your engagement are set out in the applicable Order Form.

• You must provide accurate, current, and complete information when creating an account and must keep that information up to date.
• You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must notify FullHunt immediately of any unauthorized access or use.
• Access to the Services is limited to the number of users and the scope authorized in your Order Form. You may not share, sublicense, or permit third parties to use your credentials.
• FullHunt reserves the right to suspend or restrict access where we reasonably believe the security of the Services, your account, or any third party is at risk.

Due to the technical nature of reconnaissance and vulnerability scanning, strict adherence to authorized use is mandatory. You warrant, represent, and agree that:

• Explicit Authorization: You have explicit, lawful authority to monitor, scan, and assess the domains, IP addresses, and assets you input into the Services, and you maintain and are able to evidence that authority.
• Defensive Intent: You will use the Services strictly for defensive, risk management, administrative, and other legitimate cybersecurity purposes.
• Accuracy: Your Client Data is accurate and complete, and your use of the Services does not infringe the rights of any third party.

Your use of the Services must comply with all applicable laws and regulations, including the UAE Federal Decree Law No. 34 of 2021 on Combatting Rumours and Cybercrimes and any applicable laws of the jurisdiction where the scanned assets are located. You must not use FullHunt's infrastructure, intelligence, or APIs to:

• Conduct unauthorized scanning, exploitation, or hacking of third-party systems.
• Launch Denial of Service (DoS) attacks or deliberately disrupt network operations.
• Use data obtained through the Services to facilitate unlawful activity, extortion, corporate espionage, or any activity that violates the rights of third parties.
• Bypass, disable, or interfere with any security controls, rate limits, or usage restrictions of the Services.
• Access or attempt to access the Services through any means other than the interfaces and documentation provided by FullHunt.

FullHunt and its licensors own all right, title, and interest in and to the Services, including the platform interface, scanning methodologies, proprietary algorithms, and aggregated threat intelligence databases.

• License to Use: We grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Services strictly for your internal security operations, or in accordance with a specific OEM or commercial agreement.
• Restrictions: You may not resell, redistribute, reverse-engineer, decompile, create derivative works from, or extract the underlying data pipeline of the Services without an explicit written partner or API agreement.
• Client Data: You retain all rights to your Client Data. You grant FullHunt a non-exclusive, worldwide, royalty-free license to host, process, and use Client Data solely to provide, maintain, and improve the Services.

• Confidentiality: Each party agrees to hold the other's Confidential Information in confidence, use it solely for the purposes of the engagement, and disclose it only to personnel who need to know and who are bound by confidentiality obligations at least as protective as these Terms.
• Data Protection: FullHunt processes Client Data in compliance with applicable data protection frameworks, including the EU General Data Protection Regulation (GDPR) and UAE data privacy standards. Details of our processing activities are set out in our Privacy Policy.
• Cookies: We use functional and session cookies to authenticate users and secure platform access. By using the Services, you agree to our cookie practices as described in our Privacy Policy.
• Mandatory Disclosure: Nothing in these Terms prevents either party from disclosing Confidential Information to the extent required by law, regulation, or court order, provided the disclosing party gives prompt notice (where legally permissible) to allow the other party to seek protective measures.

• Fees for the Services are set out in the applicable Order Form and are payable in accordance with the terms stated therein.
• All fees are exclusive of applicable taxes, duties, and levies, unless otherwise stated. You are responsible for any taxes imposed in connection with your use of the Services, other than taxes on FullHunt's net income.
• Late payments may result in suspension of access to the Services until outstanding amounts are settled.

The Services aggregate and present data derived from public and third-party sources. While FullHunt applies rigorous validation to the intelligence it provides, such data may change or be incomplete. FullHunt does not warrant the accuracy, completeness, or timeliness of third-party data and is not liable for decisions made on the basis of such data.

To the maximum extent permitted by applicable law, the Services are provided on an "AS IS" and "AS AVAILABLE" basis. While the platform is designed to provide high-fidelity, runtime-validated intelligence at internet scale, FullHunt does not warrant or guarantee that:

• The Services will detect 100% of all network vulnerabilities, shadow IT, or security risks.
• The Services will be entirely error-free, uninterrupted, or immune to external manipulation.

The Services are designed to augment your organization's security posture and do not replace comprehensive internal security protocols, professional judgment, or compliance obligations.

To the maximum extent permitted by UAE law, FullHunt FZCO and its directors, officers, employees, agents, and affiliates shall not be liable for any indirect, consequential, incidental, special, or punitive damages, including loss of profits, loss of data, business interruption, or damage arising from a data breach suffered by your organization, whether arising in contract, tort (including negligence), or otherwise, even if FullHunt has been advised of the possibility of such damages.

To the maximum extent permitted by applicable law, FullHunt's aggregate liability arising out of or in connection with these Terms or the Services shall not exceed the fees actually paid by you to FullHunt during the twelve (12) months preceding the event giving rise to the claim. Nothing in these Terms limits or excludes liability that cannot be limited or excluded under applicable law.

You agree to defend, indemnify, and hold harmless FullHunt and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Services, including any unauthorized or unlawful scanning activity; (b) your breach of these Terms; or (c) your violation of any applicable law or the rights of any third party.

• By You: You may terminate your use of the Services at any time in accordance with the terms of your Order Form.
• By FullHunt: FullHunt may suspend or terminate your access to the Services, in whole or in part, if you breach these Terms, fail to pay amounts due, or if continued provision would expose FullHunt to legal or regulatory risk.
• Effect of Termination: Upon termination, your right to use the Services ceases. Sections of these Terms that by their nature should survive termination — including intellectual property, confidentiality, disclaimers, limitation of liability, indemnification, and governing law — shall survive.

These Terms, and any dispute or claim arising out of or in connection with them, shall be governed by and construed in accordance with the laws of the Dubai Multi Commodities Centre (DMCC) and the applicable federal laws of the United Arab Emirates.

Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the Dubai Courts, or the courts of the DIFC, as elected by the Company.

FullHunt reserves the right to amend these Terms at any time to reflect updates to the platform, changes in law, or new regulatory requirements. We will notify active enterprise and API clients of material changes via email or in-product notice. Your continued use of the Services following the effective date of any modification constitutes your legally binding acceptance of the updated Terms.

If any provision of these Terms is held to be invalid or unenforceable, that provision shall be enforced to the maximum extent permissible, and the remaining provisions shall continue in full force and effect.

These Terms, together with any Order Form, Privacy Policy, and other agreements expressly incorporated by reference, constitute the entire agreement between you and FullHunt regarding the Services and supersede all prior agreements and understandings, whether written or oral.

Questions or notices regarding these Terms may be directed to:

• FullHunt FZCO
• Dubai Multi Commodities Centre (DMCC)
• Dubai, United Arab Emirates
• Website: https://fullhunt.io